Hello all,
Thank you for the thoughtful discussion Thursday. The meeting minutes have been updated and can be found here: https://drive.google.com/drive/folders/1fc9g7vUEuDA3qLDLk-0xoH12e_ZHRkA8
The recording for this meeting and future meetings can be found in the Library of the ZTT SME Circle group, along with the agendas/meeting minutes, and other relevant ZTT artifacts, such as the charter. The Circle group is invite-only, so if you do not have access to this group, please let us know ASAP and we can get that resolved.
All Modules for the ZT Training as well as the ZTT Glossary can be found here: https://drive.google.com/drive/folders/1RRq8MTFh19NCxw8bf5FH8Qito31mEC3F?usp=sharing
Note: Please read modules 1-5 to get a good concept of the ZT/SDP training.
ZT/SDP Resources Folder: https://drive.google.com/drive/folders/10MWGbKutdSLYcCkC1IAMSJVO6apBXp4R?usp=sharing
As a reminder, the Training team's goal is to have this module, Zero Trust Planning, ready for CSA's internal review by mid-September.
Action Points:
-
Assigned to all, please review Module 5 and provide comments/feedback by 9/15.
-
Link:https://docs.google.com/document/d/1d244goX54tGXbp22At_YPNEHn4kGLILQhTHE6g3Z0hA/edit?usp=sharing
-
Course Intro/Learning Objectives
-
The CSA internal team is tasked with updating these to reflect the curriculum learning objectives
-
5.3 Scope & Priority
-
Shruti please continue on this section by 9/22
-
5.2 Planning Considerations
-
5.2.4 Supply Chain Resilience
-
Hienrich please review the feedback Alex provided by 9/22
-
5.2.5 Detection and Incident Response Plan
-
Heinrich will rewrite this paragraph by 9/22
-
5.2.8 Compliance
-
Dr. Ron has suggested this as a helpful authoritative source for this section
-
5.4 Gap Analysis
-
Heinrich, please restructure this section by 9/22
-
5.5 Define the Protect Surface
-
Shruti please address comments in this section by 9/22
-
Otherwise, this section is considered to be in a final draft state
-
5.6 Document Transaction Flows
-
Mark S. please respond/address Anna/Daniele's comments by 9/22
-
Otherwise, this section is considered to be in a final state
-
5.7 Define the ZT Policies
-
Prasad please respond/address Anna/Daniele's comment regarding risk by 9/22
-
Otherwise, this section is considered to be in a final state
-
5.9 ZT Go Live Planning
-
Aunudrei please work on this section by 9/22; please consider the following:
-
Alex S. suggested including Detection and Incident Response to 5.9
Thank you all for your time and commitment to this program,
------------------------------
Chandler Curran
Training Project Administrator
Cloud Security Alliance
------------------------------